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ABSTRACT 


A computerized method and system for managing security risk, where risk associated with a 
breach of security is analyzed and quantified according to weighted risk variables. The analysis 
is accomplished by a computerized security risk management system that receives information 
relating to physical, informational, communication and surveillance risk, and structures the 
information such that it can be related to risk variables and a security risk level can be 
calculated according to a relevance of associated risk variables. The security risk level can be 
indicative of a likelihood that a breach of security may occur relating to a particular transaction 
or facility. Similarly, a security confidence level can be indicative of how secure a particular 
facility or practice is and a security maintenance level can be indicative of a level of security 
that should be maintained in relation to an analyzed subject. 
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